search

AFLplusplus / LibAFL

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...
Other
2.01k stars 313 forks source link

snapshot in QEMU usermode? #1716

Open juniorprincewang opened 10 months ago

juniorprincewang commented 10 months ago

Hi, are there any utilities that can be used to fuzz stateful protocols? I tried QEMU with snapshots however snapshots functions only be defined in systemmode. How can I reset the state after each target execution with QEMU in usermode? Thanks all.

Kherrisan commented 10 months ago

Maybe you could give Nyx a try. You could check the academic paper Nyx and Nyx-Net for details.

domenukk commented 10 months ago

You could recreate something like FitM with qemu_libafl https://github.com/fgsect/FitM